Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IS4FXWrs54nqsya1ZtJtZnzw8OE.roa
File: IS4FXWrs54nqsya1ZtJtZnzw8OE.roa (raw, json)
Hash identifier: 4JR+Lv5pMu1Tgttsxv6NuxHnuKDELo26oi34QpR2aeI=
Subject key identifier: 21:2E:05:5D:6A:EC:E7:89:EA:B3:26:B5:66:D2:6D:66:7C:F0:F0:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 229F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IS4FXWrs54nqsya1ZtJtZnzw8OE.roa
Signing time: Fri 25 Nov 2022 04:41:25 +0000
ROA not before: Fri 25 Nov 2022 04:41:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8863 (0x229f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=212E055D6AECE789EAB326B566D26D667CF0F0E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:46:1e:57:81:cb:95:ed:59:c3:14:2b:68:
e4:79:b0:08:2a:f3:37:e8:11:a6:31:0a:e9:04:5f:
8c:33:86:66:5f:95:36:db:49:62:8f:5f:c8:e9:b1:
2f:1d:91:29:8a:5f:f5:69:28:e3:fd:7b:1a:53:58:
c7:b9:e7:ee:93:80:de:04:5b:1d:b8:c0:5e:7f:7c:
8d:62:30:e5:60:41:d3:3c:2d:52:23:65:f7:ba:35:
5a:13:52:c2:bb:ba:1b:c0:a1:89:1b:64:b2:fc:44:
ea:cd:ba:ed:e6:51:33:48:fe:24:58:59:b4:e1:4d:
58:bb:99:ad:37:16:87:13:51:1d:d6:a9:8d:22:0a:
b9:fb:25:7f:f4:30:7a:c3:3c:c9:ec:a9:f8:bf:9c:
a4:0f:e6:43:2a:9d:40:7f:2d:bf:16:b1:66:e3:21:
bb:9f:40:0a:cd:92:b8:55:64:1c:c1:74:61:81:9c:
61:0e:39:6b:9b:fd:53:c5:09:8f:80:f4:35:f4:5c:
6f:70:89:a2:59:c2:68:92:62:16:d3:9c:07:96:17:
78:59:2c:8b:b8:86:11:b7:4e:3e:0b:6c:57:af:c4:
8d:ae:ea:cb:df:f5:0a:cc:63:fd:d6:fc:6a:42:de:
36:18:06:57:d7:67:b1:97:b4:fb:29:49:2f:aa:76:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2E:05:5D:6A:EC:E7:89:EA:B3:26:B5:66:D2:6D:66:7C:F0:F0:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IS4FXWrs54nqsya1ZtJtZnzw8OE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.216.0/21
Signature Algorithm: sha256WithRSAEncryption
95:05:5a:05:aa:48:df:19:00:93:2b:f5:4d:2b:8f:d5:c6:4c:
03:ee:2a:73:d3:f8:cd:a1:db:72:1b:fa:2f:b6:ab:ed:9f:c9:
d9:8a:03:87:95:85:31:e2:ba:42:49:c8:3e:ec:fa:45:69:ab:
cb:6e:6b:95:54:fb:20:90:e3:0c:b2:0d:ac:18:19:74:18:b9:
dd:69:51:cb:c3:21:06:a1:fb:8e:9c:9c:a6:c7:23:4c:81:c8:
4a:44:30:d5:2f:db:ff:6a:4f:e2:f8:47:3c:ab:76:84:3e:aa:
0f:ae:3b:be:33:56:16:4b:61:5f:d7:c3:db:c4:ac:3c:ab:24:
14:1b:fa:c9:6a:51:23:91:c0:6f:f5:74:78:a8:22:51:1c:5c:
c4:06:93:8b:0a:5d:da:ff:c0:95:a1:6d:88:9f:33:bf:02:ee:
91:f1:3a:17:4b:9f:36:a9:82:d7:2d:a2:11:ac:09:ea:c2:02:
9f:1d:60:91:d8:df:f8:5b:42:c3:02:ca:62:5a:3a:0c:ee:dd:
f6:ec:aa:fd:de:68:5c:04:ab:21:2b:81:18:d4:b9:1d:eb:ae:
99:42:43:ef:dd:7c:c4:4e:d3:a0:ce:6b:75:ad:0f:5c:7d:18:
c8:97:cd:7d:04:b5:c7:bf:d3:14:c3:91:50:23:08:55:8a:94:
52:a2:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org